Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_pJ8NbjqDCCSOcSEKJk73jJRzEo.roa
File:                     _pJ8NbjqDCCSOcSEKJk73jJRzEo.roa (raw, json)
Hash identifier:          tWu+zpP9elwHEZfEH3P0iUXwhOd+m5FaWrtkbP4Q1pc=
Subject key identifier:   FE:92:7C:35:B8:EA:0C:20:92:39:C4:84:28:99:3B:DE:32:51:CC:4A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B58F032
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_pJ8NbjqDCCSOcSEKJk73jJRzEo.roa
Signing time:             Sat 25 Jun 2022 11:01:13 +0000
ROA not before:           Sat 25 Jun 2022 11:01:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204518
IP address blocks:        2a06:a005:d90::/44 maxlen: 48
                          2a06:a005:e50::/44 maxlen: 48
                          2a06:a005:e70::/44 maxlen: 48
                          2a06:a005:dc0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458813490 (0x1b58f032)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 25 11:01:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe927c35b8ea0c209239c48428993bde3251cc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:a5:14:e1:d5:5c:c5:6f:55:6f:e7:28:7b:
                    b8:88:45:fc:f4:c0:d1:8e:65:6b:c8:67:38:ef:59:
                    dd:32:7b:f7:82:01:e7:80:f0:7e:2f:1c:32:06:c9:
                    04:29:37:b1:03:e5:d5:d2:c9:04:c8:fb:ca:59:91:
                    41:6e:00:d3:fa:22:33:35:8a:af:85:67:3a:74:2d:
                    ea:dc:97:b5:8e:c3:2e:b0:2e:e7:c4:23:01:59:4f:
                    3f:79:4b:f2:6e:00:87:59:80:c4:0a:f4:51:12:6d:
                    c3:12:78:e7:b6:35:9f:ca:1b:99:bd:45:c6:55:75:
                    c4:c3:1a:a9:83:9c:cf:a0:27:63:43:65:ba:f4:46:
                    a4:1a:67:06:12:3b:b3:ab:fd:7b:46:10:af:f2:a9:
                    d2:38:6a:c9:be:96:07:74:37:35:00:c8:b4:9d:4f:
                    13:b7:04:25:0d:c7:ba:34:69:a6:af:c9:aa:92:f5:
                    c0:70:b2:a9:3a:52:28:da:43:7b:84:57:dc:6d:d2:
                    48:cc:fb:f1:43:bc:76:2a:e0:8f:72:06:a3:4f:d1:
                    82:c5:62:fd:27:1d:88:32:90:ef:e2:e9:a1:d1:b8:
                    42:52:96:f4:72:2b:51:a6:23:84:12:66:ce:a4:86:
                    0a:75:17:e0:aa:37:c3:d1:b0:b7:c1:fb:83:f4:04:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:7C:35:B8:EA:0C:20:92:39:C4:84:28:99:3B:DE:32:51:CC:4A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_pJ8NbjqDCCSOcSEKJk73jJRzEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d90::/44
                  2a06:a005:dc0::/44
                  2a06:a005:e50::/44
                  2a06:a005:e70::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:4d:04:c2:c5:6e:21:ac:7f:3a:3e:da:69:75:e2:1b:e6:9d:
         39:e2:6e:86:6b:a6:e0:29:5c:44:d9:ad:96:ac:d0:f3:f3:b2:
         18:80:82:18:4f:a9:33:03:1e:0f:70:4d:9c:1d:83:43:a3:96:
         6a:cc:22:b3:40:89:70:b0:04:43:43:31:77:8e:1e:b9:d0:22:
         64:c1:7c:43:04:19:db:84:c5:16:18:83:85:32:6e:18:aa:e4:
         30:4d:c6:e2:e5:61:7c:20:e1:12:4b:31:76:9a:55:7d:28:b2:
         47:44:d3:ea:2b:46:22:66:02:af:93:4e:ad:a1:cf:d1:88:b7:
         95:93:29:0e:20:57:49:93:5a:ee:3d:74:23:1c:5e:8c:16:1a:
         a1:c2:45:13:14:b5:39:16:b0:22:bf:c0:8d:72:a4:a1:7b:7a:
         9d:57:fc:4f:4f:a4:8e:2f:df:14:f7:22:5b:7b:ad:d2:b1:d8:
         16:46:8e:24:b8:d0:7b:b5:ea:e9:d3:cb:3d:91:13:5c:b4:00:
         0b:86:08:d7:71:c9:7f:b4:4a:e1:bc:92:a9:12:25:7a:a2:3c:
         fd:b3:b8:62:a1:fd:ef:08:bf:db:e9:db:5d:2d:6c:86:4a:1c:
         a1:41:b9:4c:33:14:1b:a7:2b:94:ed:ae:60:4d:98:da:dd:8b:
         34:00:97:22
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEG1jwMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYy
NTExMDExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmU5MjdjMzViOGVh
MGMyMDkyMzljNDg0Mjg5OTNiZGUzMjUxY2M0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAItOpRTh1VzFb1Vv5yh7uIhF/PTA0Y5la8hnOO9Z3TJ794IB
54Dwfi8cMgbJBCk3sQPl1dLJBMj7ylmRQW4A0/oiMzWKr4VnOnQt6tyXtY7DLrAu
58QjAVlPP3lL8m4Ah1mAxAr0URJtwxJ457Y1n8obmb1FxlV1xMMaqYOcz6AnY0Nl
uvRGpBpnBhI7s6v9e0YQr/Kp0jhqyb6WB3Q3NQDItJ1PE7cEJQ3HujRppq/JqpL1
wHCyqTpSKNpDe4RX3G3SSMz78UO8dirgj3IGo0/RgsVi/ScdiDKQ7+LpodG4QlKW
9HIrUaYjhBJmzqSGCnUX4Ko3w9Gwt8H7g/QEq30CAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBT+knw1uOoMIJI5xIQomTveMlHMSjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L19wSjhOYmpxRENDU09jU0VLSms3M2pKUnpFby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAIwJAMHBCoGoAUNkAMHBCoGoAUNwAMHBCoG
oAUOUAMHBCoGoAUOcDANBgkqhkiG9w0BAQsFAAOCAQEAAU0EwsVuIax/Oj7aaXXi
G+adOeJuhmum4ClcRNmtlqzQ8/OyGICCGE+pMwMeD3BNnB2DQ6OWaswis0CJcLAE
Q0Mxd44eudAiZMF8QwQZ24TFFhiDhTJuGKrkME3G4uVhfCDhEksxdppVfSiyR0TT
6itGImYCr5NOraHP0Yi3lZMpDiBXSZNa7j10IxxejBYaocJFExS1ORawIr/AjXKk
oXt6nVf8T0+kji/fFPciW3ut0rHYFkaOJLjQe7Xq6dPLPZETXLQAC4YI13HJf7RK
4bySqRIleqI8/bO4YqH97wi/2+nbXS1shkocoUG5TDMUG6crlO2uYE2Y2t2LNACX
Ig==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net